−$10store sale
Ellipal
Ellipal is a Hong Kong maker of multi-chain hardware wallets: its Titan devices sign air-gapped, exchanging data with the phone app only through QR codes, and the X Card signs over NFC.
What Is Ellipal?
Ellipal is a Hong Kong company whose own timeline starts in 2018. It makes multi-chain hardware wallets. The line-up consists of the Ellipal Titan 2 and Ellipal Titan Mini, touchscreen devices that sign by QR code, and the Ellipal X Card, an NFC card without a screen.
The Titan 2 has no USB data port, Bluetooth, Wi-Fi or NFC. It exchanges QR codes with the ELLIPAL app for iOS and Android, and firmware updates arrive on a microSD card placed in a separate charging dock. According to Ellipal, the sealed metal body wipes the keys when it is opened.
The backup is a standard 24-word BIP39 seed phrase, which Ellipal states can be restored in any BIP39-compatible wallet. There is no cloud backup and no Shamir option, so the written phrase is the only way back.
The limits are mostly about verifiability. Firmware and app are closed source and no third-party audit has been published; the company runs a bug bounty instead. The secure element model is not disclosed, so its EAL5+ level is a vendor claim. The app collects usage analytics with no in-app opt-out, and there is no desktop app and no native Bitcoin multisig.
A hardware wallet is a dedicated device that keeps private keys offline and signs transactions internally, so the keys never reach an internet-connected computer or phone.
A touchscreen display is a screen that allows users to interact with a device by touching the surface, commonly used in hardware wallets for easy navigation and transaction confirmation.
Read full definition: Touchscreen DisplayQR Code Signing is a method used in cryptocurrency transactions where a QR code is generated to confirm and sign a transaction, enhancing security and user convenience.
Read full definition: QR Code SigningNFC Connectivity in cryptocurrency enables contactless transactions using near-field communication, allowing users to sign or authorize actions by tapping their device to a reader.
Read full definition: NFC ConnectivityBluetooth Connectivity enables wireless communication between devices, like hardware wallets and smartphones, using Bluetooth or Bluetooth Low Energy (BLE) for secure data transfer.
Read full definition: Bluetooth ConnectivityA firmware update installs a new version of the software that runs on a hardware wallet, to close security holes, fix bugs or add coins and features.
Read full definition: Firmware UpdateA backup in cryptocurrency is a secure copy of a wallet's seed phrase or private keys. It enables recovery of funds if the original wallet is lost or damaged.
Read full definition: BackupBIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
Read full definition: BIP39A mnemonic phrase is a set of words that stores a cryptocurrency wallet's private keys, allowing users to recover access if lost.
Read full definition: Mnemonic PhraseVendor Backup is a service by hardware wallet manufacturers that securely stores encrypted seed phrase shards with third parties, enabling recovery without self-custody of the full seed.
Read full definition: Vendor BackupFirmware is the software that runs on a hardware wallet itself: it generates keys, shows transaction details on the screen and signs.
Read full definition: FirmwareA bug bounty is a company's standing offer to pay independent researchers who find security vulnerabilities in its products and report them privately.
Read full definition: Bug BountyA secure element is a tamper-resistant chip built to store secrets and resist physical attacks such as side-channel analysis and fault injection.
Read full definition: Secure ElementEAL certification (Evaluation Assurance Level) under Common Criteria shows how rigorously a hardware component, such as the secure chip of a hardware wallet, was evaluated, from EAL1 to EAL7.
Read full definition: EAL CertificationTelemetry is usage data, diagnostics and error reports that wallet software sends to its developer automatically. In some apps it can be switched off.
Read full definition: TelemetryBitcoin (BTC) is the first decentralized cryptocurrency, launched in 2009. It uses blockchain technology for secure, peer-to-peer digital transactions without intermediaries.
Read full definition: BitcoinMultisig (multi-signature) is a security feature that requires multiple private keys to authorize a transaction, enhancing protection against unauthorized access in blockchain networks.
Read full definition: MultisigReal-World Examples
Example 1: To update an Ellipal Titan 2, a user downloads the firmware file from Ellipal's support site to a microSD card, puts the card into the charging dock and starts the update in the device settings. The device itself never connects to a computer.
Example 2: A Titan 2 is damaged beyond repair. Its owner restores the 24-word phrase, plus the passphrase she had set, in another BIP39-compatible wallet and regains access.
Firmware is the software that runs on a hardware wallet itself: it generates keys, shows transaction details on the screen and signs.
Read full definition: FirmwareA passphrase is an additional security layer for cryptocurrency wallets, acting as a 25th word in the BIP39 seed phrase, protecting access to hidden wallets.
Read full definition: PassphraseBIP39 is a standard for generating mnemonic seed phrases that are used to create deterministic wallets and securely back up cryptocurrency private keys.
Read full definition: BIP39Ellipal hardware wallets
Browse wallets grouped by this feature
−$40store sale
−$49store sale
Affiliate link — we may earn a commission at no extra cost to you. Learn more about affiliate links
Frequently Asked Questions
How is an Ellipal Titan 2 updated without a cable to a computer?
Firmware updates arrive on a microSD card placed in a separate charging dock. The user downloads the file from Ellipal's support site to the card, puts the card into the dock and starts the update in the device settings. The Titan 2 itself has no USB data port, Bluetooth, Wi-Fi or NFC.
Can an Ellipal wallet be restored without an Ellipal device?
Yes. The backup is a standard 24-word BIP39 seed phrase, which Ellipal states can be restored in any BIP39-compatible wallet, together with the passphrase if one was set. There is no cloud backup and no Shamir option, so the written phrase is the only way back.
Which Ellipal security claims cannot be checked independently?
Firmware and app are closed source and no third-party audit has been published; the company runs a bug bounty instead. The secure element model is not disclosed, so its EAL5+ level is a vendor claim, as is the statement that the sealed body wipes the keys when opened. The app also collects usage analytics with no in-app opt-out.
Ready to Choose a Secure Wallet?
Use our tools to find the right hardware wallet for your needs.


